$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa File: 31d36ece-9039-43a2-82a2-03e7d8e7f563.roa (raw, json) Hash identifier: k99MKccyFW/Pb7anja/HNlSaWY1P6pTb+xHxlw+vrlY= Subject key identifier: 9F:DF:6E:73:06:34:B7:E6:91:55:B9:DA:D1:BF:24:CE:F9:AD:8D:A9 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 40C81516C008E9B8E350F3EC62F831B2842990C6 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa Signing time: Mon 31 Mar 2025 15:00:49 +0000 ROA not before: Mon 31 Mar 2025 15:00:49 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c8:15:16:c0:08:e9:b8:e3:50:f3:ec:62:f8:31:b2:84:29:90:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Mar 31 15:00:49 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=82384c89e46752ce62a713c4cdbd2fc0cab40a75f68f9ca8fbca46406cbd3169, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:36:43:c5:38:dc:81:c1:d9:96:6e:76:c8:63: 8b:22:09:d0:a8:bd:b8:8d:41:ce:4e:41:56:65:a1: ab:27:cc:ce:70:af:c6:fe:21:e6:22:79:a6:b0:6e: 13:11:d8:f8:96:f6:67:ee:b1:82:7b:98:4c:a8:ea: 6d:78:2c:7e:2a:87:5a:a2:dc:5f:e4:5d:47:bf:f2: 84:67:2d:81:e1:2f:94:f7:e2:af:b4:84:e8:c8:43: 33:c8:ed:43:7a:b3:4a:25:97:4e:c9:f5:b5:16:e0: bf:c4:79:5a:5a:8e:80:72:7b:f5:08:28:5a:0d:11: c2:1a:c1:36:9e:38:bf:f8:22:8a:7c:0c:98:dd:5c: 31:54:87:a8:cf:97:e5:ad:bc:ac:49:a1:c4:88:57: ac:79:f0:6a:37:44:f5:e4:88:51:90:45:7f:bf:ab: e2:91:cf:ee:e8:5c:30:b1:ed:c7:b2:3f:28:6c:11: 18:85:c4:90:a2:50:4a:a3:3a:b4:b2:5a:21:d3:b9: f2:b7:26:fb:65:8e:0d:1d:28:98:4a:25:7c:32:29: 73:ad:a5:14:4b:28:c8:48:1f:2b:99:e7:e8:04:4c: 46:b6:02:23:b5:f1:4f:7f:5a:72:3f:a7:9b:93:29: 77:bc:d2:0d:c6:6f:65:ff:10:13:c9:b4:8e:31:85: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DF:6E:73:06:34:B7:E6:91:55:B9:DA:D1:BF:24:CE:F9:AD:8D:A9 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fc::/32 Signature Algorithm: sha256WithRSAEncryption a4:da:13:51:fd:27:2f:03:9c:a0:27:d2:ef:2d:9a:61:7d:6a: 56:f0:e2:50:2b:58:6a:a9:d2:5a:96:b1:ba:42:c4:ee:3f:c5: ae:41:36:8f:26:3c:79:24:76:bc:db:c7:a9:21:3f:86:fc:1d: bb:a7:e3:6a:55:94:0c:7f:ab:c4:b4:93:e8:6d:9c:b5:8b:38: 22:4d:c1:dc:15:e9:dd:93:07:63:09:bc:9a:6b:9d:a0:58:d3: 7c:40:19:60:43:6f:f6:a4:cf:4e:11:76:9d:81:99:df:54:d4: ae:cb:09:69:a2:78:ca:e5:18:41:7f:7f:e9:39:8e:7a:70:a8: 14:8e:f4:12:92:f7:c3:5c:2a:96:73:02:63:4a:5b:d2:07:c7: 4f:46:4e:17:d8:c4:c3:80:cf:bc:c9:bf:08:80:93:7e:c1:7e: fd:55:47:34:7a:3d:99:f4:ff:a3:be:c1:56:8c:a9:67:48:45: 36:e0:93:a1:e3:37:67:63:12:f8:22:25:42:a3:41:7d:ab:cf: 6f:4b:12:cf:2c:84:ec:be:b2:45:43:1c:5a:ac:fd:77:3f:77: 16:48:bb:f1:a7:72:6e:33:bf:39:b6:25:0b:db:2f:d4:cc:ea: 91:0d:61:b8:d2:1e:62:d9:6e:d9:39:1b:53:d5:92:81:f4:d8: 6d:3a:71:d6 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUQMgVFsAI6bjjUPPsYvgxsoQpkMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDA0OVoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAODIzODRjODllNDY3NTJjZTYyYTcx M2M0Y2RiZDJmYzBjYWI0MGE3NWY2OGY5Y2E4ZmJjYTQ2NDA2Y2JkMzE2OTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zZDxTjcgcHZlm52yGOLIgnQqL24 jUHOTkFWZaGrJ8zOcK/G/iHmInmmsG4TEdj4lvZn7rGCe5hMqOpteCx+Kodaotxf 5F1Hv/KEZy2B4S+U9+KvtIToyEMzyO1DerNKJZdOyfW1FuC/xHlaWo6Acnv1CCha DRHCGsE2nji/+CKKfAyY3VwxVIeoz5flrbysSaHEiFesefBqN0T15IhRkEV/v6vi kc/u6Fwwse3Hsj8obBEYhcSQolBKozq0sloh07nytyb7ZY4NHSiYSiV8MilzraUU SyjISB8rmefoBExGtgIjtfFPf1pyP6ebkyl3vNINxm9l/xATybSOMYXqXwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJ/fbnMGNLfmkVW52tG/JM75rY2pMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMxZDM2ZWNlLTkwMzktNDNhMi04MmEyLTAzZTdkOGU3ZjU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A/DANBgkqhkiG9w0BAQsFAAOCAQEApNoTUf0nLwOcoCfS7y2a YX1qVvDiUCtYaqnSWpaxukLE7j/FrkE2jyY8eSR2vNvHqSE/hvwdu6fjalWUDH+r xLST6G2ctYs4Ik3B3BXp3ZMHYwm8mmudoFjTfEAZYENv9qTPThF2nYGZ31TUrssJ aaJ4yuUYQX9/6TmOenCoFI70EpL3w1wqlnMCY0pb0gfHT0ZOF9jEw4DPvMm/CICT fsF+/VVHNHo9mfT/o77BVoypZ0hFNuCToeM3Z2MS+CIlQqNBfavPb0sSzyyE7L6y RUMcWqz9dz93Fki78adybjO/ObYlC9sv1MzqkQ1huNIeYtlu2TkbU9WSgfTYbTpx 1g== -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net